Hackdroid is an Android-based ethical hacking and security testing toolkit designed for security professionals and non-coders alike. The app provides a simple button-based interface that automates command execution in the background, making security tools accessible without requiring command-line knowledge.

IMPORTANT: All 60+ security tools perform REAL network operations with actual API integrations, socket connections, and genuine scan results. No simulations or mockups.

• Button-based navigation - Just tap cards to access tool categories
• Function key shortcuts - Press F1-F12 to instantly launch tools
• Input dialogs with helpful hints and labels
• Automated execution - Tools run in background with progress indicators
• Detailed results - Findings displayed with severity levels and remediation suggestions

• OkHttp 4.12.0 for HTTP/HTTPS connections
• Java Socket for raw TCP port scanning and banner grabbing
• InetAddress for DNS resolution
• SSLContext for TLS/SSL certificate analysis
• Kotlinx Coroutines for async non-blocking operations

• Google DNS-over-HTTPS (dns.google) - DNS record enumeration
• ip-api.com - IP geolocation with proxy/VPN detection
• HackerTarget API - WHOIS lookups and subdomain discovery
• crt.sh Certificate Transparency - SSL certificate log search
• Wayback Machine (web.archive.org) - Historical URL discovery

• Threat Level Calculation - Automatic risk assessment
• Vulnerability Prediction - Based on detected technology stack
• Attack Surface Analysis - Identify entry points and attack vectors
• Remediation Suggestions - Code examples and configuration fixes
• Attack Plan Generation - Step-by-step exploitation guidance

• Workflow Builder - Create custom tool chains
• Scheduled Scans - Daily, weekly, monthly, or cron-based
• Triggers - Automatic execution based on conditions
• Background Execution - WorkManager integration

• Information Gathering - 15 tools (nmap, enum4linux, etc.)
• Exploitation Tools - 5 tools (metasploit, exploit-db, etc.)
• Phishing Analysis - 10 tools (social engineering toolkit)
• Camera Security - 3 tools (RTSP scanners)
• Social Media OSINT - 3 tools
• SMS Analysis - 6 tools
• Hash Tools - 4 tools (hash-identifier, hashcat)
• XSS Attack Tools - 3 tools

• Concurrent scanning - Up to 20 parallel socket connections
• Service detection - Maps ports to service names
• Banner grabbing - FTP, SMTP, POP3, IMAP, HTTP banners
• Common ports: 21, 22, 23, 25, 53, 80, 110, 143, 443, 445, 993, 995, 1433, 1521, 3306, 3389, 5432, 5900, 6379, 8080, 8443, 27017

• Certificate details - Subject, issuer, validity dates
• Protocol analysis - TLS version detection
• Cipher suite - Cipher strength analysis
• Security checks - HTTPS redirect, HSTS, HSTS preload
• Expiration warning - Alerts for soon-to-expire certificates

• Error-based detection - Database error pattern matching
• UNION-based detection - Column count enumeration
• Time-based blind - Response timing analysis
• Database fingerprinting - MySQL, PostgreSQL, MSSQL, Oracle, SQLite

• Reflected XSS - Direct payload reflection
• DOM-based XSS - JavaScript sink analysis
• Filter bypass - Encoding, case variation, event handlers

com.hack.droid/
├── activities/           # 26 UI Activities
│   ├── MainActivity.kt
│   ├── VulnerabilityScanActivity.kt
│   ├── OsintActivity.kt
│   ├── WebAttackActivity.kt
│   ├── ResultActivity.kt
│   ├── HistoryActivity.kt
│   ├── DashboardActivity.kt
│   ├── AutomationActivity.kt
│   └── ...
├── adapters/             # RecyclerView Adapters
│   ├── ToolAdapter.kt
│   ├── ScanResultAdapter.kt
│   └── FindingsAdapter.kt
├── ai/                   # AI Analysis Engine
│   └── AiEngine.kt
├── automation/           # Workflow & Scheduling
│   ├── AutomationEngine.kt
│   ├── WorkflowExecutor.kt
│   └── SchedulerManager.kt
├── models/               # 16 Data Models
│   ├── ScanResult.kt
│   ├── Tool.kt
│   ├── AiAnalysis.kt
│   └── ...
├── services/             # Background Services
│   └── ScanService.kt
├── termux/               # Termux Integration
│   ├── TermuxManager.kt
│   ├── TermuxTools.kt
│   └── TermuxInstaller.kt
├── tools/                # 20+ Security Tools
│   ├── VulnerabilityScanner.kt
│   ├── OsintTools.kt
│   ├── WebAttackTools.kt
│   ├── AdditionalTools.kt
│   ├── NativeToolExecutor.kt
│   └── ...
├── utils/                # Utility Classes
│   ├── NetworkUtils.kt
│   ├── PreferencesManager.kt
│   └── ConfigManager.kt
└── workers/              # Background Workers
    └── ScheduledScanWorker.kt

• Language: Kotlin (primary), Java 17 target
• Platform: Android SDK 34 (compileSdk/targetSdk), minSdk 24 (Android 7.0+)
• Build System: Gradle with Kotlin DSL
• Networking: OkHttp 4.12.0, Java Socket, SSLContext
• JSON: Gson 2.10.1
• Async: Kotlinx Coroutines 1.7.3
• UI: Material Design 3, AndroidX (AppCompat, RecyclerView, CardView, Navigation)
• Background: WorkManager 2.9.0, Foreground Services

• Android 7.0 (API 24) or higher
• Internet permission (required)
• Access Network State permission (required)

1. Open the project in Android Studio
2. Sync project with Gradle files
3. Build and run on your device or emulator

./gradlew assembleDebug

1. Build the APK using Android Studio or Gradle
2. Enable "Unknown sources" in Android settings
3. Install on your Android device:

   adb install app/build/outputs/apk/debug/app-debug.apk

1. Launch the app and accept the legal disclaimer
2. Use F1-F12 function keys or tap cards to access tool categories
3. Enter the target information when prompted
4. View detailed scan results with findings and recommendations
5. Results are saved to history for later review
6. Create workflows for automated testing

This application is designed for ethical hacking and security testing purposes only. Users must:

• ✅ Obtain proper authorization before testing any system
• ✅ Only test systems they own or have explicit permission to test
• ✅ Comply with all applicable laws and regulations
• ✅ Use this tool responsibly

⚠️ Unauthorized access to computer systems is illegal. The developers assume no liability for misuse of this tool.

External APIs used have rate limits:

• Google DNS: 1000 requests/day (unofficial)
• ip-api.com: 45 requests/minute (free tier)
• HackerTarget: 100 requests/day (free tier)
• crt.sh: Unlimited but may throttle

Consider configuring your own API keys for production use.

This project is for educational purposes. Use responsibly.

This tool is provided "as is" without warranty of any kind. Use at your own risk.